Hello, I have prepared the otrs2 2.4.9-1 upload now. I have attached the diff (cleaned up by unnecessary changes again, like copyright year updates and cvs file versions) and here is the debdiff: Kernel/Modules/AdminNotificationEvent.pm | 24 +- Kernel/Modules/AdminUserGroup.pm | 20 - Kernel/Modules/AgentTicketAttachment.pm | 253 ++++++++++++---------- Kernel/Modules/AgentTicketMove.pm | 6 Kernel/Modules/CustomerTicketAttachment.pm | 253 ++++++++++++---------- Kernel/Output/HTML/DashboardTicketGeneric.pm | 2 Kernel/Output/HTML/DashboardUserOnline.pm | 2 Kernel/Output/HTML/Layout.pm | 13 - Kernel/Output/HTML/Standard/AttachmentBlocker.dtl | 22 + Kernel/System/EmailParser.pm | 8 Kernel/System/HTMLUtils.pm | 6 Kernel/System/Ticket.pm | 7 Kernel/System/Ticket/Event/NotificationEvent.pm | 22 + debian/changelog | 8 14 files changed, 400 insertions(+), 246 deletions(-) Please notify me, if I could go ahead with my upload for Squeeze. Thanks. Am 25.10.2010 22:58, schrieb Patrick Matthäi: > Hello release team, > > 2.4.8 has made it's way into squeeze a few days ago. > Anyway the OTRS AG released yet another (security) bugfix release today. > > The upstream changelog is (only bugfixes) is (with some comments from me): > > - 2010-09-30 Fixed bug#6016 - AgentTicketZoom is vunerable to XSS > attacks from HTML e-mails. > => Security related, an must have! > > - 2010-09-22 Fixed bug#5903 - E-mail notification links don't contain > <a href... tags. > => Annoying for agents > > - 2010-09-29 Fixed bug#6030 - Event notifications get's fired several > times on > event "TicketFreeTextUpdate". > => In some situations agents get spammed > > - 2010-09-22 Fixed bug#5941 - Error in Apache log when no tickets > and/or customers in dashboard. > => bad behaviour > > - 2010-09-14 Fixed bug#5541 - Dashboard Chart generates error in > webserver log. > => bad behaviour > > - 2010-09-09 Fixed bug#5462 - > Kernel::System::Ticket::TicketEscalationIndexBuild() > does not invalidate the cache. > => wrong caching with escalated tickets in some situations > > - (2010/08/27) Fixed bug#5667 - Rich Text is not working in ipad. It's not > possible to add a note or close a ticket. > => better support/bugfixing with ipad as client > > - (2010/08/25) Fixed bug#5266 - Ticket Zoom shows wrong html content if > there > is no text but two html attachments in there. > => ugly > > > There is no debdiff, yet - I will create it tomorrow, but the whole diff > may be small and I hope that I get your OK to upload 2.4.9-1 to sid with > squeeze as target. > -- /* Mit freundlichem Gruß / With kind regards, Patrick Matthäi GNU/Linux Debian Developer E-Mail: pmatthaei@debian.org patrick@linux-dev.org Comment: Always if we think we are right, we were maybe wrong. */
Attachment:
diff.txt.gz
Description: application/gzip
Attachment:
signature.asc
Description: OpenPGP digital signature